CVE-2007-5891

ManageEngine OpManager MSP Edition/7.0 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) requestid, (2) fileid, (3) woMode, and (2) woID parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References (4)

Scores

EPSS 0.0029
EPSS Percentile 51.7%

Classification

CWE
CWE-79
Status draft

Affected Products (2)

manageengine/opmanager
manageengine/opmanager_msp

Timeline

Published Nov 08, 2007
Tracked Since Feb 18, 2026